$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa File: ef566134-dc37-415a-a1e3-05f23305a92b.roa (raw, json) Hash identifier: MH5VAleEB8QDycDfAgLCTfSjM21aZqY+6ghgWG9m3rA= Subject key identifier: 21:54:0F:E7:C3:17:68:25:3A:6D:E1:46:CF:73:E1:7A:D5:CB:35:39 Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Certificate serial: 51F23B9F59FF684C4CF5B36EEEBC793170C5021D Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa Signing time: Mon 27 Jul 2026 00:00:40 +0000 ROA not before: Mon 27 Jul 2026 00:00:40 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 7224 IP address blocks: 172.96.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f2:3b:9f:59:ff:68:4c:4c:f5:b3:6e:ee:bc:79:31:70:c5:02:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d Validity Not Before: Jul 27 00:00:40 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=1dc768eeb45f0ee19282023c48a161044d13cbf56bc92718b09919fc1b09a3d9, CN=b0dbbb6a-5472-4b68-ae4d-401518603039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:91:bc:9a:80:4b:b4:18:84:6c:1e:13:2c: 53:7b:44:05:72:0e:54:1d:91:d6:09:54:db:d7:f0: b0:4e:98:82:65:12:13:5c:b0:f8:d6:03:bb:2a:51: 26:b5:19:07:7f:08:9d:92:6d:9f:02:2a:d5:5e:62: 7e:96:31:f2:9f:fe:2c:01:25:9d:18:d5:3e:67:0c: c7:46:e0:60:1c:1a:b4:ef:17:72:5a:f7:70:ac:51: b9:3e:a6:90:7f:39:67:fb:fd:43:ed:02:b9:58:e7: 2b:9e:ef:2f:e7:f5:3e:2b:be:ba:59:81:8a:1c:41: e8:11:11:c6:87:97:47:7d:45:50:0d:fb:c9:9a:08: d7:e8:a4:e0:af:a4:6a:79:62:44:66:89:56:92:43: 8d:50:99:0e:ad:d0:ca:6b:5a:88:58:9a:ba:44:f5: 5a:15:1b:34:f7:dd:8a:2c:8a:b5:b5:a3:e2:51:0a: d8:13:f8:b6:c2:3e:bd:7a:3a:ca:d6:6f:cd:47:69: b2:21:51:5c:c2:0c:b7:1e:00:b5:4f:bd:23:f6:79: 6e:fb:15:fb:4a:62:3f:ab:b8:e6:35:34:a5:e9:ab: d7:d4:68:f8:ea:0b:83:9d:84:b1:da:da:67:37:f0: 51:1d:67:57:98:1f:7b:17:f7:83:2a:ef:d5:81:ec: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:0F:E7:C3:17:68:25:3A:6D:E1:46:CF:73:E1:7A:D5:CB:35:39 X509v3 Authority Key Identifier: keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/ef566134-dc37-415a-a1e3-05f23305a92b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.104.0/21 Signature Algorithm: sha256WithRSAEncryption b0:4a:6c:7f:4f:71:9f:c4:3d:50:61:78:a3:43:98:52:45:a3: 3b:63:62:45:b8:25:b7:46:f4:d7:26:9a:99:9d:f3:76:01:cc: b2:c6:eb:95:84:49:30:8f:92:39:d6:f0:aa:e7:e5:d1:dc:d5: d6:03:ee:42:61:fd:38:0b:21:d6:b8:7b:40:91:d3:2c:da:c0: 7b:a6:ad:5e:16:4b:e4:b4:0f:3a:2f:98:b9:81:bf:b6:4b:e5: 92:bd:f2:66:d8:77:aa:c9:90:77:27:d1:8a:87:ac:7e:ce:d3: 08:24:23:be:d7:f4:9d:2b:b6:51:24:2b:bb:e9:d6:72:57:b8: e3:14:7b:c2:e3:45:e1:ca:3f:48:b8:33:4b:bd:f2:7a:98:3c: ad:c0:fa:39:c7:e0:84:45:c5:37:75:2a:c8:ed:fa:e6:00:99: eb:5e:8f:ba:cf:31:54:fb:6f:54:38:48:a0:bd:a3:40:e0:46: 7d:e0:b1:50:84:92:03:7a:31:df:35:ac:07:69:72:e4:e1:d6: b6:ac:55:75:db:71:fc:22:5c:64:65:12:84:e7:5a:e3:e9:4f: 19:28:d6:d3:df:5f:8f:c8:ed:10:5f:ab:16:35:16:8b:cb:b0: fa:93:98:e4:a5:31:20:f1:7a:74:61:8f:3a:1f:f7:ed:9f:23: 83:62:68:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUfI7n1n/aExM9bNu7rx5MXDFAh0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGVlNDU4M2Q4NGQ5YjRmMDgyNGNiODBiYThmYzEyNDBi NDc5NGI1MTUwNzFlOTc1MWQwHhcNMjYwNzI3MDAwMDQwWhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGM3NjhlZWI0NWYwZWUxOTI4MjAyM2M0OGExNjEwNDRk MTNjYmY1NmJjOTI3MThiMDk5MTlmYzFiMDlhM2Q5MS0wKwYDVQQDEyRiMGRiYmI2 YS01NDcyLTRiNjgtYWU0ZC00MDE1MTg2MDMwMzkwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqt5G8moBLtBiEbB4TLFN7RAVyDlQdkdYJVNvX8LBOmIJl EhNcsPjWA7sqUSa1GQd/CJ2SbZ8CKtVeYn6WMfKf/iwBJZ0Y1T5nDMdG4GAcGrTv F3Ja93CsUbk+ppB/OWf7/UPtArlY5yue7y/n9T4rvrpZgYocQegREcaHl0d9RVAN +8maCNfopOCvpGp5YkRmiVaSQ41QmQ6t0MprWohYmrpE9VoVGzT33YosirW1o+JR CtgT+LbCPr16OsrWb81HabIhUVzCDLceALVPvSP2eW77FftKYj+ruOY1NKXpq9fU aPjqC4OdhLHa2mc38FEdZ1eYH3sX94Mq79WB7KDVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIVQP58MXaCU6beFGz3PhetXLNTkwHwYDVR0jBBgwFoAUfYRHxJeKC0xz m+v2kuJMdd0/vK4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNGU0ZmVjNS0z NTEwLTQwMTctOTBlZi04MzkxNDEyZWNkNmMvMGVlNDU4M2Q4NGQ5YjRmMDgyNGNi ODBiYThmYzEyNDBiNDc5NGI1MTUwNzFlOTc1MWQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZGZkN2Y2ZDMtZTZlOS00OTg3LTlhZTctZDA1 MmM1MzUzODk4L2VmNTY2MTM0LWRjMzctNDE1YS1hMWUzLTA1ZjIzMzA1YTkyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2RmZDdmNmQzLWU2ZTktNDk4Ny05YWU3 LWQwNTJjNTM1Mzg5OC8yYlR3Z2t5NEM2ajhFa0MwZVV0UlVISHBkUjAuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAOsYGgwDQYJKoZIhvcNAQELBQADggEBALBKbH9PcZ/EPVBheKNDmFJFoztj YkW4JbdG9Ncmmpmd83YBzLLG65WESTCPkjnW8Krn5dHc1dYD7kJh/TgLIda4e0CR 0yzawHumrV4WS+S0DzovmLmBv7ZL5ZK98mbYd6rJkHcn0YqHrH7O0wgkI77X9J0r tlEkK7vp1nJXuOMUe8LjReHKP0i4M0u98nqYPK3A+jnH4IRFxTd1Ksjt+uYAmete j7rPMVT7b1Q4SKC9o0DgRn3gsVCEkgN6Md81rAdpcuTh1rasVXXbcfwiXGRlEoTn WuPpTxko1tPfX4/I7RBfqxY1FovLsPqTmOSlMSDxenRhjzof9+2fI4NiaOk= -----END CERTIFICATE-----Generated at Tue Jul 28 18:07:43 2026 by rpki-client